@kenkaiiii/ggcoder 5.68.1 → 5.69.0

package/dist/tools/truncate.js

@@ -58,4 +58,191 @@ export function truncateTail(content, maxLines = MAX_LINES, maxBytes = MAX_BYTES
         keptLines: kept.length,
     };
 }
+/* ----------------------------------------------------------------------- */
+/* "What was cut" descriptor for truncation notes                            */
+/* ----------------------------------------------------------------------- */
+/** Hard cap on the descriptor appended to a truncation note. */
+export const OMITTED_NOTE_MAX_CHARS = 300;
+const SAMPLE_MAX_CHARS = 80;
+const MAX_SAMPLES = 3;
+const MAX_LABELS = 3;
+const MAX_FILES = 3;
+/** Cheap gate: a line that can't contain any of these is never error/warn-shaped. */
+const DIAG_PREFILTER = /err|fail|fatal|panic|exception|traceback|crit|warn|caused by|not ok|[✗✖❌×]/i;
+// Optional leading timestamp / [bracketed] prefix before an UPPERCASE log level.
+const LOG_PREFIX = String.raw `^\W{0,4}(?:[\d\-/:.,TZ+]+\s+|\[[^\]]{1,40}\]\s*)*`;
+const LEVEL_END = String.raw `(?=[\s:\]!|]|$)(?!\s*[=,;)])`;
+/**
+ * Shape-based (not keyword-based) error-line detectors, so source code being
+ * paged through by `read` (`throw new Error(...)`, `console.error(...)`) does
+ * not count — only lines that look like a diagnostic / log record.
+ */
+const ERROR_LINE = [
+    new RegExp(`${LOG_PREFIX}(?:ERROR|ERR!|FATAL|CRITICAL|PANIC|FAIL(?:ED|URE)?)${LEVEL_END}`),
+    /^(?:error|fatal)(?:\[[\w-]+\])?:\s/i, // rustc/cargo/git/CLI `error: …` (column 0)
+    /^npm ERR!/,
+    /\.\w{1,6}(?::\d+){1,2}:?\s*(?:fatal\s+)?error\b/i, // gcc/clang `f.c:1:2: error:`
+    /\(\d+,\d+\):\s*error\b/, // tsc `f.ts(1,2): error TS…`
+    /^\s*\d+:\d+\s+error\s/, // eslint stylish
+    /^\s*(?:E\s+)?(?:Uncaught\s+)?[A-Z][\w.$]*(?:Error|Exception)(?:\s*\[[\w-]+\])?:(?:\s|$)/,
+    /^Traceback \(most recent call last\)/,
+    /^\s*(?:✗|✖|❌|not ok\b|--- FAIL\b)/,
+    /^thread '.*' panicked|^panic:/,
+    /^\s*Caused by:/,
+    /\blevel[=:]\s*"?(?:error|fatal)\b/i,
+];
+const WARN_LINE = [
+    new RegExp(`${LOG_PREFIX}(?:WARN(?:ING)?)${LEVEL_END}`),
+    /^warn(?:ing)?(?:\[[\w-]+\])?:\s/i,
+    /^npm WARN\b/,
+    /\.\w{1,6}(?::\d+){1,2}:?\s*warning\b/i,
+    /\(\d+,\d+\):\s*warning\b/,
+    /^\s*\d+:\d+\s+warning\s/,
+    /^\s*[A-Z]\w*Warning:\s/,
+    /\blevel[=:]\s*"?warn(?:ing)?\b/i,
+];
+/** Error codes / exception names (headroom #3635's "exception types"). */
+const LABEL_RES = [
+    /\berror\[([A-Z]?\d{3,5})\]/, // rustc E0425
+    /\berror\s+(TS\d{3,5})\b/, // tsc TS2345
+    /^\s*(?:E\s+)?(?:Uncaught\s+)?(?:[\w$]+\.)*([A-Z][\w$]*(?:Error|Exception|Warning))\b(?:\s*\[[\w-]+\])?:/,
+    /\b(E(?:NOENT|ACCES|PERM|ADDRINUSE|CONNREFUSED|CONNRESET|TIMEDOUT|EXIST|ISDIR|NOTDIR|NOTEMPTY|MFILE|PIPE|NOTFOUND|HOSTUNREACH)|ERR_[A-Z0-9_]{3,})\b/,
+];
+const SRC_EXT = "ts|tsx|js|jsx|mjs|cjs|mts|cts|py|rs|go|java|kt|kts|rb|php|c|h|cc|cpp|cxx|hpp|cs|swift|m|mm|scala|ex|exs|erl|hs|ml|lua|sh|vue|svelte|json|ya?ml|toml|css|scss|less|html|sql|proto|zig|dart";
+/** A source path followed by a line location: `a/b.ts:12`, `b.ts(3,4)`. */
+const FILE_LOC = new RegExp(String.raw `(?:^|[\s(\["'\`])((?:[\w.@~+-]*/)*[\w@+-][\w.@+-]*\.(?:${SRC_EXT}))(?::\d+|\(\d+,\d+\))`);
+const PY_FILE = /File "([^"]+)", line \d+/;
+const RUST_FILE = /-->\s*([^\s:]+):\d+/;
+/** Lines whose file references are diagnostic (stack frames, locations). */
+const FRAME_LINE = new RegExp(String.raw `^\s*(?:at\s|File "|-->|from\s)|^\S+\.(?:${SRC_EXT})(?::\d+|\(\d+,\d+\))`);
+/** Object-literal / call-argument continuation lines in source code. */
+const CODE_TAIL = /[,{([]\s*$/;
+function isError(line) {
+    return (DIAG_PREFILTER.test(line) && !CODE_TAIL.test(line) && ERROR_LINE.some((re) => re.test(line)));
+}
+function isWarning(line) {
+    return (DIAG_PREFILTER.test(line) && !CODE_TAIL.test(line) && WARN_LINE.some((re) => re.test(line)));
+}
+function extractFile(line) {
+    return (PY_FILE.exec(line) ?? RUST_FILE.exec(line) ?? FILE_LOC.exec(line))?.[1];
+}
+function shorten(s, max) {
+    return s.length <= max ? s : `${s.slice(0, max - 1)}…`;
+}
+/** Last two path segments — enough to identify a file without eating the cap. */
+function shortPath(p) {
+    const parts = p.split(/[\\/]/).filter(Boolean);
+    return parts.length <= 2 ? parts.join("/") : `…/${parts.slice(-2).join("/")}`;
+}
+function listWithMore(items, max) {
+    const shown = items.slice(0, max).join(", ");
+    return items.length > max ? `${shown}, +${items.length - max}` : shown;
+}
+/**
+ * Describe WHAT a truncation dropped, so the agent can decide whether to fetch
+ * the rest (modelled on headroomlabs-ai/headroom PR #3635's CCR descriptor):
+ * error/warning line counts, distinct error codes / exception names, distinct
+ * source files referenced by diagnostics/stack frames, and the first few
+ * distinct error lines. Labels, files and sample lines already visible in
+ * `shown` are left out — the note justifies retrieval, it doesn't restate.
+ *
+ * Returns `""` when nothing notable was cut (the note stays byte-identical),
+ * otherwise `"Omitted part: …."`, never longer than OMITTED_NOTE_MAX_CHARS.
+ * Deterministic: first-appearance order, no hashing or randomness.
+ */
+export function describeOmitted(omitted, shown) {
+    let errors = 0;
+    let warnings = 0;
+    const labels = new Set();
+    const files = new Set();
+    const samples = [];
+    const sampleKeys = new Set();
+    // Everything already tested against `shown` (hit or miss) — each distinct
+    // candidate costs one substring scan, however often it repeats.
+    const checked = new Set();
+    const isNew = (s) => {
+        if (checked.has(s))
+            return false;
+        checked.add(s);
+        return !shown.includes(s);
+    };
+    for (const line of omitted) {
+        const err = isError(line);
+        const warn = !err && isWarning(line);
+        if (err)
+            errors++;
+        else if (warn)
+            warnings++;
+        if (err || warn) {
+            for (const re of LABEL_RES) {
+                const label = re.exec(line)?.[1];
+                if (label && isNew(label))
+                    labels.add(label);
+            }
+        }
+        if (err || warn || FRAME_LINE.test(line)) {
+            const file = extractFile(line);
+            if (file && isNew(file))
+                files.add(file);
+        }
+        if (err && samples.length < MAX_SAMPLES) {
+            const text = line.trim().replace(/\s+/g, " ");
+            // Distinct modulo numbers, so a retry loop doesn't fill every slot.
+            const key = text.replace(/\d+/g, "#");
+            if (text && !sampleKeys.has(key) && isNew(line.trim())) {
+                sampleKeys.add(key);
+                samples.push(text);
+            }
+        }
+    }
+    if (errors === 0 && warnings === 0 && files.size === 0)
+        return "";
+    const parts = [];
+    if (errors || warnings) {
+        const plural = (n, what) => `${n} ${what} line${n === 1 ? "" : "s"}`;
+        const counts = [errors && plural(errors, "error"), warnings && plural(warnings, "warning")]
+            .filter(Boolean)
+            .join(", ");
+        const labelList = labels.size ? ` (${listWithMore([...labels], MAX_LABELS)})` : "";
+        parts.push(`${counts}${labelList}`);
+    }
+    if (files.size) {
+        const names = [...files].map(shortPath);
+        parts.push(`${files.size} file${files.size === 1 ? "" : "s"}: ${listWithMore(names, MAX_FILES)}`);
+    }
+    const head = `Omitted part: ${parts.join("; ")}`;
+    let note = `${head}.`;
+    // Add sample error lines while they fit under the hard cap.
+    const quoted = [];
+    for (const s of samples) {
+        const next = [...quoted, `"${shorten(s, SAMPLE_MAX_CHARS)}"`];
+        const candidate = `${head}; first: ${next.join(" | ")}.`;
+        if (candidate.length > OMITTED_NOTE_MAX_CHARS)
+            break;
+        quoted.push(next[next.length - 1]);
+        note = candidate;
+    }
+    return shorten(note, OMITTED_NOTE_MAX_CHARS);
+}
+/** Timestamps / hex addresses vary across "similar" repeats — ignore them. */
+function looseKey(line) {
+    return line
+        .replace(/\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(?:\.\d+)?Z?/g, "")
+        .replace(/\b\d{2}:\d{2}:\d{2}(?:\.\d+)?\b/g, "")
+        .replace(/0x[0-9a-f]+/gi, "")
+        .trim();
+}
+/**
+ * `describeOmitted` for a non-positional cut (content-aware compression):
+ * the omitted lines are the original lines with no counterpart in `shown`.
+ * Repeats collapsed to `line  (×N)` / `(×N similar)` count as shown.
+ */
+export function describeCompressed(original, shown) {
+    const shownKeys = new Set();
+    for (const l of shown.split("\n")) {
+        shownKeys.add(looseKey(l.replace(/ {2}\(×\d+(?: similar)?\)$/, "")));
+    }
+    const omitted = original.split("\n").filter((l) => !shownKeys.has(looseKey(l)));
+    return describeOmitted(omitted, shown);
+}
 //# sourceMappingURL=truncate.js.map

package/dist/tools/truncate.js.map

@@ -1 +1 @@
-{"version":3,"file":"truncate.js","sourceRoot":"","sources":["../../src/tools/truncate.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AAE3C,sFAAsF;AACtF,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC;AASnC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAQ,GAAG,SAAS,EACpB,QAAQ,GAAG,SAAS;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,sBAAsB;IACtB,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEpC,sBAAsB;IACtB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB;QAClE,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS;QACT,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAQ,GAAG,SAAS,EACpB,QAAQ,GAAG,SAAS;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,oCAAoC;IACpC,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElC,0CAA0C;IAC1C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS;QACT,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"truncate.js","sourceRoot":"","sources":["../../src/tools/truncate.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AAE3C,sFAAsF;AACtF,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC;AASnC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAQ,GAAG,SAAS,EACpB,QAAQ,GAAG,SAAS;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,sBAAsB;IACtB,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEpC,sBAAsB;IACtB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB;QAClE,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS;QACT,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAQ,GAAG,SAAS,EACpB,QAAQ,GAAG,SAAS;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,oCAAoC;IACpC,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElC,0CAA0C;IAC1C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS;QACT,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAE7E,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,qFAAqF;AACrF,MAAM,cAAc,GAClB,6EAA6E,CAAC;AAEhF,iFAAiF;AACjF,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,mDAAmD,CAAC;AACjF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA,8BAA8B,CAAC;AAE3D;;;;GAIG;AACH,MAAM,UAAU,GAAa;IAC3B,IAAI,MAAM,CAAC,GAAG,UAAU,sDAAsD,SAAS,EAAE,CAAC;IAC1F,qCAAqC,EAAE,4CAA4C;IACnF,WAAW;IACX,kDAAkD,EAAE,8BAA8B;IAClF,wBAAwB,EAAE,6BAA6B;IACvD,uBAAuB,EAAE,iBAAiB;IAC1C,yFAAyF;IACzF,sCAAsC;IACtC,mCAAmC;IACnC,+BAA+B;IAC/B,gBAAgB;IAChB,oCAAoC;CACrC,CAAC;AAEF,MAAM,SAAS,GAAa;IAC1B,IAAI,MAAM,CAAC,GAAG,UAAU,mBAAmB,SAAS,EAAE,CAAC;IACvD,kCAAkC;IAClC,aAAa;IACb,uCAAuC;IACvC,0BAA0B;IAC1B,yBAAyB;IACzB,wBAAwB;IACxB,iCAAiC;CAClC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,SAAS,GAAa;IAC1B,4BAA4B,EAAE,cAAc;IAC5C,yBAAyB,EAAE,aAAa;IACxC,yGAAyG;IACzG,oJAAoJ;CACrJ,CAAC;AAEF,MAAM,OAAO,GACX,2LAA2L,CAAC;AAC9L,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,MAAM,CAAC,GAAG,CAAA,0DAA0D,OAAO,wBAAwB,CACpG,CAAC;AACF,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,4EAA4E;AAC5E,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,MAAM,CAAC,GAAG,CAAA,2CAA2C,OAAO,uBAAuB,CACpF,CAAC;AAEF,wEAAwE;AACxE,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,CACL,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,CACL,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC5F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,GAAW;IACrC,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAe,EAAE,GAAW;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B,EAAE,KAAa;IACvE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAW,EAAE;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG;YAAE,MAAM,EAAE,CAAC;aACb,IAAI,IAAI;YAAE,QAAQ,EAAE,CAAC;QAC1B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,GAAG,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C,oEAAoE;YACpE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;aACxF,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACjD,IAAI,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC;IACtB,4DAA4D;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,GAAG,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACzD,IAAI,SAAS,CAAC,MAAM,GAAG,sBAAsB;YAAE,MAAM;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI;SACR,OAAO,CAAC,qDAAqD,EAAE,EAAE,CAAC;SAClE,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC;SAC/C,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAa;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/tools/ui-adopt.js

@@ -12,6 +12,8 @@ const params = z.object({
 export function createUiAdoptTool(cwd, registry, writer, planModeRef) {
     return {
         name: "ui_adopt",
+        // Apply writes several files; a steering message must not leave it half-done.
+        interruptible: false,
         description: "Plan then adopt real public Bklit/Kokonut registry source into an existing React project. Reports dependency closure, relocated imports, missing packages/styles, attribution and conflicts. Apply requires the unchanged plan hash, only creates new component files through normal write controls, and never installs packages or overwrites user files.",
         parameters: params,
         executionMode: "sequential",

package/dist/tools/ui-adopt.js.map

@@ -1 +1 @@
-{"version":3,"file":"ui-adopt.js","sourceRoot":"","sources":["../../src/tools/ui-adopt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACxF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,QAAoB,EACpB,MAA0C,EAC1C,WAAkC;IAElC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,4VAA4V;QAC9V,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,YAAY;QAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO;YACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,gBAAgB,CAAC,WAAW,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI;gBAC/C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC5F,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,SAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;wBAAE,SAAS;oBACtC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;oBACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACjD,OAAO,CACR,CAAC;oBACF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAC3D,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;oBACpB,OAAO;oBACP,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,YAAY,EACV,gIAAgI;iBACnI,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO;gBACP,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3E,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ui-adopt.js","sourceRoot":"","sources":["../../src/tools/ui-adopt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACxF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,QAAoB,EACpB,MAA0C,EAC1C,WAAkC;IAElC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,8EAA8E;QAC9E,aAAa,EAAE,KAAK;QACpB,WAAW,EACT,4VAA4V;QAC9V,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,YAAY;QAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO;YACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,gBAAgB,CAAC,WAAW,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI;gBAC/C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC5F,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,SAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;wBAAE,SAAS;oBACtC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;oBACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACjD,OAAO,CACR,CAAC;oBACF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAC3D,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;oBACpB,OAAO;oBACP,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,YAAY,EACV,gIAAgI;iBACnI,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO;gBACP,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3E,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/git.d.ts

@@ -1,3 +1,80 @@
+/** `-c` overrides that disable every repo-config execution sink GG's calls can reach. */
+export declare const GIT_HARDENING_CONFIG_ARGS: readonly string[];
+/**
+ * Inserted right after the subcommand of diff-producing commands: external
+ * diff drivers (`diff.external`, `diff.<driver>.command`) and `textconv`
+ * filters are repo-configured programs. `-c diff.external=` is NOT used — an
+ * empty value makes `git diff` die with "cannot run".
+ */
+export declare const GIT_NO_EXTERNAL_DIFF_ARGS: readonly string[];
+/**
+ * Inserted after `status`: inspecting a submodule's work tree spawns a nested
+ * `git status` inside it, which honours the submodule's OWN filter drivers
+ * (its config was never probed). `dirty` still reports moved submodule
+ * commits but never enters the submodule work tree. Skipped when the caller
+ * passes its own `--ignore-submodules`.
+ */
+export declare const GIT_STATUS_SUBMODULE_ARGS: readonly string[];
+/**
+ * Build `-c` overrides that blank every filter / merge driver named in the
+ * NUL-separated output of `git config -z --name-only --get-regexp`. Returns
+ * null when a driver name contains `=` — `-c` splits at the first `=`, so the
+ * override could not be expressed and the caller must refuse to run.
+ */
+export declare function buildDriverOverrides(outputs: readonly string[]): string[] | null;
+/**
+ * The git executable. On Windows, libuv's PATH search tries the child's cwd
+ * first, so a `git.exe` planted at a repo root would run instead of git —
+ * resolve an absolute path from PATH once instead.
+ */
+export declare function resolveGitBinary(): string;
+export interface BackgroundGitOptions {
+    cwd: string;
+    timeoutMs?: number;
+    maxBuffer?: number;
+    /** Written to stdin, which is then closed. */
+    input?: string;
+    signal?: AbortSignal;
+    /** Extra environment on top of `process.env` and the hardening env. */
+    env?: Readonly<Record<string, string>>;
+    /**
+     * Repo-selecting global options (`--git-dir=…`, `--work-tree=…`) placed
+     * before the subcommand — and before `config` in the driver probe, so it
+     * inspects the same repository.
+     */
+    globalArgs?: readonly string[];
+}
+export interface BackgroundGitResult {
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Rejection of {@link runBackgroundGit}, shaped like a promisified execFile
+ * error: `code` is git's exit status (number) or a spawn errno (string).
+ */
+export declare class BackgroundGitError extends Error {
+    readonly code: number | string | null;
+    readonly killed: boolean;
+    readonly stdout: string;
+    readonly stderr: string;
+    constructor(message: string, details: {
+        code: number | string | null;
+        killed: boolean;
+        stdout: string;
+        stderr: string;
+    });
+}
+/**
+ * Full argv for a hardened background git call (minus the binary). Exposed
+ * for tests; callers use {@link runBackgroundGit}.
+ */
+export declare function hardenedGitArgs(args: readonly string[], options: BackgroundGitOptions): Promise<string[]>;
+/**
+ * Run git for GG's own background purposes with repo-config execution sinks
+ * disabled. Resolves `{stdout, stderr}` on exit 0; rejects with
+ * {@link BackgroundGitError} otherwise. Output is identical to plain git.
+ */
+export declare function runBackgroundGit(args: readonly string[], options: BackgroundGitOptions): Promise<BackgroundGitResult>;
 export declare function getGitBranch(cwd: string): Promise<string | null>;
 /** Count staged, modified, deleted, renamed, and untracked files. */
 export declare function getGitDirtyFileCount(cwd: string): Promise<number>;

package/dist/utils/git.js

@@ -1,37 +1,301 @@
 import { execFile } from "node:child_process";
-export function getGitBranch(cwd) {
-    return new Promise((resolve) => {
-        execFile("git", ["rev-parse", "--abbrev-ref", "HEAD"], { cwd, timeout: 2000 }, (error, stdout) => {
-            if (error) {
-                resolve(null);
-                return;
+import { statSync } from "node:fs";
+import path from "node:path";
+// ── Hardened runner for GG's own (background) git calls ─────────────────────
+//
+// GitSpawn: a repository's own `.git/config` (or an `include.path` it pulls
+// in) can name programs that git runs during perfectly ordinary read-only
+// commands — `core.fsmonitor` on any index refresh, a `post-index-change` hook
+// when `git status` rewrites the index, `filter.<driver>.clean/process` (with
+// `.gitattributes`) when status re-hashes a stat-dirty file, `textconv` /
+// external diff drivers in `git show`, `gpg.program` via `log.showSignature`,
+// credential/ssh/askpass helpers, pagers and editors. GG runs git on its own
+// (project open, CI chip, XP, verification snapshots, the destructive-git
+// guard), so merely opening a malicious repo must not execute anything.
+//
+// Every background git call goes through {@link runBackgroundGit}, which
+// prepends `-c` overrides (command-line config beats every config file) and
+// blanks the per-driver filter/merge commands discovered by a safe
+// `git config` probe. Prior art: gptme b65f699d (`git_inspect_cmd`) and
+// MoonshotAI/kimi-code#3964 (`hardenedGitConfigArgs`). The agent's own `bash`
+// tool is out of scope — those are explicit, user-visible commands.
+const NULL_DEVICE = process.platform === "win32" ? "NUL" : "/dev/null";
+/** `-c` overrides that disable every repo-config execution sink GG's calls can reach. */
+export const GIT_HARDENING_CONFIG_ARGS = [
+    "-c",
+    "core.fsmonitor=false",
+    "-c",
+    `core.hooksPath=${NULL_DEVICE}`,
+    "-c",
+    "core.pager=cat",
+    "-c",
+    "core.editor=:",
+    "-c",
+    "core.askPass=",
+    // Plain OpenSSH: keeps any (rare) lazy fetch working without the repo's command.
+    "-c",
+    "core.sshCommand=ssh",
+    // An empty value resets the helper list, dropping repo-configured helpers.
+    "-c",
+    "credential.helper=",
+    // Background calls never need the network. A partial clone would otherwise
+    // lazy-fetch missing blobs (e.g. in `git show`) through the repo's own
+    // `remote.<name>.uploadpack` / ext:: URL; GIT_NO_LAZY_FETCH backs this up.
+    "-c",
+    "protocol.allow=never",
+    "-c",
+    "protocol.ext.allow=never",
+    "-c",
+    "gpg.program=",
+    "-c",
+    "log.showSignature=false",
+    "-c",
+    "commit.gpgSign=false",
+    "-c",
+    "tag.gpgSign=false",
+    "-c",
+    "merge.verifySignatures=false",
+    "-c",
+    "submodule.recurse=false",
+];
+/**
+ * Inserted right after the subcommand of diff-producing commands: external
+ * diff drivers (`diff.external`, `diff.<driver>.command`) and `textconv`
+ * filters are repo-configured programs. `-c diff.external=` is NOT used — an
+ * empty value makes `git diff` die with "cannot run".
+ */
+export const GIT_NO_EXTERNAL_DIFF_ARGS = ["--no-ext-diff", "--no-textconv"];
+const DIFF_FAMILY = new Set(["diff", "show", "log"]);
+/**
+ * Inserted after `status`: inspecting a submodule's work tree spawns a nested
+ * `git status` inside it, which honours the submodule's OWN filter drivers
+ * (its config was never probed). `dirty` still reports moved submodule
+ * commits but never enters the submodule work tree. Skipped when the caller
+ * passes its own `--ignore-submodules`.
+ */
+export const GIT_STATUS_SUBMODULE_ARGS = ["--ignore-submodules=dirty"];
+/**
+ * Subcommands that never hash or check out work-tree content, so no
+ * clean/smudge/process filter can run — the per-driver probe is skipped.
+ */
+const NO_FILTER_SUBCOMMANDS = new Set(["rev-parse", "remote", "rev-list", "patch-id", "show"]);
+const PROBE_TIMEOUT_MS = 2_000;
+/**
+ * Build `-c` overrides that blank every filter / merge driver named in the
+ * NUL-separated output of `git config -z --name-only --get-regexp`. Returns
+ * null when a driver name contains `=` — `-c` splits at the first `=`, so the
+ * override could not be expressed and the caller must refuse to run.
+ */
+export function buildDriverOverrides(outputs) {
+    const filters = new Set();
+    const merges = new Set();
+    for (const output of outputs) {
+        for (const name of output.split(/[\0\n]/)) {
+            const filter = /^filter\.(.+)\.(?:clean|smudge|process|required)$/is.exec(name)?.[1];
+            const merge = /^merge\.(.+)\.driver$/is.exec(name)?.[1];
+            const driver = filter ?? merge;
+            if (driver === undefined)
+                continue;
+            if (driver.includes("="))
+                return null;
+            (filter !== undefined ? filters : merges).add(driver);
+        }
+    }
+    const args = [];
+    for (const driver of filters) {
+        args.push("-c", `filter.${driver}.clean=`, "-c", `filter.${driver}.smudge=`, "-c", `filter.${driver}.process=`, 
+        // A blanked `required` filter would otherwise make status die.
+        "-c", `filter.${driver}.required=false`);
+    }
+    for (const driver of merges)
+        args.push("-c", `merge.${driver}.driver=`);
+    return args;
+}
+let cachedGitBinary;
+/**
+ * The git executable. On Windows, libuv's PATH search tries the child's cwd
+ * first, so a `git.exe` planted at a repo root would run instead of git —
+ * resolve an absolute path from PATH once instead.
+ */
+export function resolveGitBinary() {
+    if (cachedGitBinary !== undefined)
+        return cachedGitBinary;
+    cachedGitBinary = "git";
+    if (process.platform === "win32") {
+        for (const dir of (process.env.PATH ?? "").split(path.delimiter)) {
+            const clean = dir.trim().replace(/^"|"$/g, "");
+            if (!clean || !path.isAbsolute(clean))
+                continue;
+            const candidate = path.join(clean, "git.exe");
+            try {
+                if (statSync(candidate).isFile()) {
+                    cachedGitBinary = candidate;
+                    break;
+                }
             }
-            resolve(stdout.trim() || null);
-        });
-    });
+            catch {
+                // not here
+            }
+        }
+    }
+    return cachedGitBinary;
 }
-/** Count staged, modified, deleted, renamed, and untracked files. */
-export function getGitDirtyFileCount(cwd) {
+/**
+ * Rejection of {@link runBackgroundGit}, shaped like a promisified execFile
+ * error: `code` is git's exit status (number) or a spawn errno (string).
+ */
+export class BackgroundGitError extends Error {
+    code;
+    killed;
+    stdout;
+    stderr;
+    constructor(message, details) {
+        super(message);
+        this.name = "BackgroundGitError";
+        this.code = details.code;
+        this.killed = details.killed;
+        this.stdout = details.stdout;
+        this.stderr = details.stderr;
+    }
+}
+function spawnGit(args, options) {
     return new Promise((resolve, reject) => {
-        execFile("git", ["status", "--porcelain=v1", "--untracked-files=all"], { cwd, timeout: 2000 }, (error, stdout) => {
-            if (error) {
-                reject(error);
+        const child = execFile(resolveGitBinary(), [...args], {
+            cwd: options.cwd,
+            timeout: options.timeoutMs ?? 2_000,
+            maxBuffer: options.maxBuffer ?? 1024 * 1024,
+            signal: options.signal,
+            windowsHide: true,
+            encoding: "utf8",
+            env: {
+                ...process.env,
+                GIT_TERMINAL_PROMPT: "0",
+                GIT_OPTIONAL_LOCKS: "0",
+                GIT_PAGER: "cat",
+                GIT_NO_LAZY_FETCH: "1",
+                ...options.env,
+            },
+        }, (error, stdout, stderr) => {
+            if (!error) {
+                resolve({ stdout, stderr });
                 return;
             }
-            resolve(stdout.split(/\r?\n/).filter(Boolean).length);
+            const code = error.code;
+            reject(new BackgroundGitError(error.message, {
+                code: typeof code === "number" || typeof code === "string" ? code : null,
+                killed: error.killed === true,
+                stdout,
+                stderr,
+            }));
         });
+        if (options.input !== undefined && child.stdin) {
+            child.stdin.on("error", () => {
+                // git exited before reading all input; the exit callback reports it.
+            });
+            child.stdin.end(options.input);
+        }
+    });
+}
+/** Repo-local filter/merge driver overrides, or null when they cannot be expressed. */
+async function probeDriverOverrides(options) {
+    const outputs = await Promise.all(["--local", "--worktree"].map(async (scope) => {
+        try {
+            const { stdout } = await spawnGit([
+                ...GIT_HARDENING_CONFIG_ARGS,
+                ...(options.globalArgs ?? []),
+                "config",
+                scope,
+                "--includes",
+                "-z",
+                "--name-only",
+                "--get-regexp",
+                "^(filter|merge)\\.",
+            ], {
+                cwd: options.cwd,
+                timeoutMs: PROBE_TIMEOUT_MS,
+                signal: options.signal,
+                env: options.env,
+            });
+            return stdout;
+        }
+        catch (error) {
+            // Exit 1 = no matching keys; 128/129 = not a repo / old git without
+            // --worktree. Spawn failures and timeouts fail closed.
+            if (error instanceof BackgroundGitError && typeof error.code === "number" && !error.killed)
+                return "";
+            throw error;
+        }
+    }));
+    return buildDriverOverrides(outputs);
+}
+/**
+ * Full argv for a hardened background git call (minus the binary). Exposed
+ * for tests; callers use {@link runBackgroundGit}.
+ */
+export async function hardenedGitArgs(args, options) {
+    const [subcommand, ...rest] = args;
+    let drivers = [];
+    if (subcommand === undefined || !NO_FILTER_SUBCOMMANDS.has(subcommand)) {
+        const probed = await probeDriverOverrides(options);
+        if (probed === null) {
+            throw new BackgroundGitError("git config names a filter/merge driver that cannot be disabled", {
+                code: null,
+                killed: false,
+                stdout: "",
+                stderr: "",
+            });
+        }
+        drivers = probed;
+    }
+    let command = [...args];
+    if (subcommand !== undefined && DIFF_FAMILY.has(subcommand)) {
+        command = [subcommand, ...GIT_NO_EXTERNAL_DIFF_ARGS, ...rest];
+    }
+    else if (subcommand === "status" &&
+        !rest
+            .slice(0, rest.includes("--") ? rest.indexOf("--") : rest.length)
+            .some((arg) => arg.startsWith("--ignore-submodules"))) {
+        command = [subcommand, ...GIT_STATUS_SUBMODULE_ARGS, ...rest];
+    }
+    return [...GIT_HARDENING_CONFIG_ARGS, ...drivers, ...(options.globalArgs ?? []), ...command];
+}
+/**
+ * Run git for GG's own background purposes with repo-config execution sinks
+ * disabled. Resolves `{stdout, stderr}` on exit 0; rejects with
+ * {@link BackgroundGitError} otherwise. Output is identical to plain git.
+ */
+export async function runBackgroundGit(args, options) {
+    return spawnGit(await hardenedGitArgs(args, options), options);
+}
+// ── Background helpers ──────────────────────────────────────────────────────
+export async function getGitBranch(cwd) {
+    try {
+        const { stdout } = await runBackgroundGit(["rev-parse", "--abbrev-ref", "HEAD"], { cwd });
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Count staged, modified, deleted, renamed, and untracked files. */
+export async function getGitDirtyFileCount(cwd) {
+    const { stdout } = await runBackgroundGit(["status", "--porcelain=v1", "--untracked-files=all"], {
+        cwd,
     });
+    return stdout.split(/\r?\n/).filter(Boolean).length;
 }
 /**
  * Whether `cwd` is inside a git work tree. Distinct from getGitBranch, which
  * returns null both for non-repos AND for freshly-init'd repos with no commits
  * (rev-parse HEAD fails before the first commit).
  */
-export function isGitRepo(cwd) {
-    return new Promise((resolve) => {
-        execFile("git", ["rev-parse", "--is-inside-work-tree"], { cwd, timeout: 2000 }, (error, stdout) => {
-            resolve(!error && stdout.trim() === "true");
-        });
-    });
+export async function isGitRepo(cwd) {
+    try {
+        const { stdout } = await runBackgroundGit(["rev-parse", "--is-inside-work-tree"], { cwd });
+        return stdout.trim() === "true";
+    }
+    catch {
+        return false;
+    }
 }
 //# sourceMappingURL=git.js.map